Get recognized with Partner Admin Link

Optimized for managed services where your organization is acting on behalf of the customer, PAL allows you to associate your MPN ID with the credentials that you use to deliver services within the customer's Azure tenant. Microsoft can attribute influence and Azure consumed revenue to your organization based on the account's permissions (RBAC role) and scope (subscription, resource group, resource instance).

Learn more below and check out the new webcast recording from February 7th!

Re: Get recognized with Partner Admin Link

We are helping one of our customers in migrating their work loads to Azure.

However, there are many Resource Groups in their Subscription. And, we have worked only on few Resource Groups. Is it possible to associated us at RG level? If not, by any chance, Microsoft is planning to add this feature in near future? Please let us know.

Re: Get recognized with Partner Admin Link

Hi Praveen!

If you use PAL to associate your MPN ID with the credentials that you use in the customer's environment, the recognition and Azure revenue attribution is according to the scope of your permissions. For example, if your user account has access to a subset of RGs within the subscription, you will be recognized for the revenue generated by resources within those groups. In fact, PAL association is granular to the invidual resource level.

So the short answer is yes 🙂

P.S. We decommissioned that DL in order to scale through this community and the formal support channels.

Re: Get recognized with Partner Admin Link

Would you be able to help me with a couple of quick questions regarding Azure Partner Admin Link please?

Are there any news when DPOR will be replaced with PAL (I’m mostly referring to the ACR Incentives)?

Upon reading about PAL, it feels like it’s more focused on Managed Services partners, it’s a bit unclear how Professional Services partners will be getting recognition as our permissions can be deleted after the project is completed?

Re: Get recognized with Partner Admin Link

In EA, there is no current plan to replace DPOR with PAL as the association method to reward our partners for the services they provide to customers to drive consumption (ACR).

With regards to the focus for PAL being Managed Services, that is somewhat true. Although, there are cases where even Professional Services partners receive admin access to customer subscriptions during the course of the engagement. That said, we recognize a gap exists, and are workin on a Claims-based attach method for scenarios where access is not granted.

Re: Get recognized with Partner Admin Link

1)How do I confirm whether myMPN ID islinked to the account? Because once tagged we dont receive any mail or notification saying our MPN ID was attached to theaccount through PAL. Also we should receive an email notification if MPN ID through PAL is removed from the account (This can even be taken as a feedback to Microsoft)

2)Once PAL is done, how many days does it take for consumption to reflect on Partner Center Portal?

3)Can PAL be done by any of our team member with user account, who has access to client org or the team member should have an admin role?

4)For EA(Enterprise Agreement) where we don’t have any user accounts, would it count if the customer’s admin accounts tag us as a PAL?

Re: Get recognized with Partner Admin Link

Hi Brian,

If i am an owner for the subscription, do i get the azure revenue attribution for all the resource groups and Subsets in the subscription even for new deployments as well?

I have a customer for which I have deployed resources for him, suppose if he gives access to my user account across the Subscription. Will I get the PAL usage for the entire subscription or only for the resources which I have deployed with my user account?

Re: Get recognized with Partner Admin Link

If you are already the DPOR then everything within that subscription is tracked. PALS is design for instances where a customer might have an EA or CSP from another provider, but you do specific work for them such as within Azure you manage the IaaS or web platforms and want to get recognition for that work.

One to watch is that PALS only counts towards Azure MSP currently and not competencies.

Re: Get recognized with Partner Admin Link

If i am an owner for the subscription, do i get the azure revenue attribution for all the resource groups and Subsets in the subscription even for new deployments as well?

I have a customer for which I have deployed resources for him, suppose if he gives access to my user account across the Subscription. Will I get the PAL usage for the entire subscription or only for the resources which I have deployed with my user account?

I have deployed a VM and my colleague deployed Network Infra, can we add PAL using same credentials or it needs to be done on a individual level?

Re: Get recognized with Partner Admin Link

@Bharath from experience if you have a user account that has access across the subscription then you get the PAL usage for the entire subscription as its works on what the account has access to and you've said that in this case its the subcription. Anything that is subsequently deployed you also get the credit for.

The idea is that you should only have access to the reources (ie resource groups) that you are responsible for and require the PAL recognition for. If you are only responsible for specific resource groups then the customer has incorrectly given you additional access going against best practice, but to your advantage.

If you both have access to the VM and network then you only need to add on the one account or both if not to get the credit for both.

Re: Get recognized with Partner Admin Link

hi all-

just looking for some clarification on PAL...a few different scenarios:

1. if we have a team of 5 that are doing work for a single client and all gain access to a client's environment as contributors to different Azure Subscriptions (lets just say 5 here for example), the reporting or recognition would be for 5 different sets of resources, correct?

2.opposite of that, same situation, if only 1 of those people assign PAL, that means we are missing out on 4 other sets/resources of PAL recognition. Correct?

3.we have the same 5 team members, and they all have the same access to a clients subscriptions, and only 1 person has PAL. Are we covered for the entire environment and getting PAL recognition for everything that all 5 team members are working on? or are we missing out on any PAL recognition in this scenario.

the going in strategy is obviously everyone put PAL on, all day long. 🙂

i just want to make sure how this shows up to our reporting and what happens in specific situations we are seeing with our teams and clients above.

Re: Get recognized with Partner Admin Link

Correct on all 3 counts.

On point 3 you can't get the credit 5 times becuase 5 usres have access to the enviroment. Just setup one user account with the access to all the Azure resoruce groups needed by your organisation and leave that just to do PAL's is the way I'm working to keep things simple and incase one of teh team leaves you don't have to set up again.

Re: Get recognized with Partner Admin Link

Yes that has the same rights. Probelm is with a user account if the user leaves and the account gets deleted you'll lose the assoication, and also its easier to track as we know what the account is for.

Re: Get recognized with Partner Admin Link

Hi,

When I try to get access to influenced revenue reporting for linked partner ID through Partner Center Dashboard or MyInsights Dashboard, the message 'Revenue and Performance reporting requires permission from your Primary contact.' appears. Together with our Primary Contact I looked into permissions etc., but it turns out I have all possible permissions (Global Admin, Admin agent etc.). What specific permission or configuration is required to get access?

Re: Get recognized with Partner Admin Link

Does anybody know what the results are when you combine PAL with PIM (Priviledged Identity Management, feature of AD Premium P2/EMS E5 etc.)? PIM is just-in-time access (only Admin permissions when needed to do specific Admin stuff) at request. In that case you have only Admin permissions for a specific (often quite short) amount of time. PAL only counts when having Admin rights on resources. For a lot of customers it is prefered to have the managed service provider use PIM to get access. What impact is there on PAL? If a partner (by using PIM) only has Admin access for a couple of hours per week, do they only get rewarded for those hours? In that case commercial interests are not aligning with security/GDPR etc. interests. Please advice.

Re: Get recognized with Partner Admin Link

Thanks for your prompt answer.

So the Microsoft best practice of using PIM is not aligning very well with the commercial aspects of PAL/PEC (come to think of it, what is the difference between PAL en PEC? I guess by setting PAL, you are able to get PEC?). By using PIM, we'll never get to earning PEC, as we almost never need and thus ask for 24 h access to a customer's environment. I guess it is never wise to put commercial benefits against security best practices. When we are behaving like a good MSP we'll shoot ourselves in the foot by recommending PIM.